
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json)
Hash identifier: uFE2BS8FYDxYGtltSVPvD+4vN7RVieYO0Cnb+dX4BW8=
Subject key identifier: 74:2B:1C:1B:3F:8C:5A:98:9F:AA:87:65:49:26:22:B0:FC:20:17:CA
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial: 1343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
Manifest number: 132B
Signing time: Mon 22 Jun 2026 16:58:37 +0000
Manifest this update: Mon 22 Jun 2026 16:58:37 +0000
Manifest next update: Mon 29 Jun 2026 16:58:37 +0000
Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: GasIdY+YZXwl+SOngJfRyRp3iP1un4tFUjaiJPjDQaM=)
2: 35615A30C84511ED90A61540C4F9AE02.roa (hash: ikwRwX6HznSAvB0gllaQ7OaCqCsraBq8/S0KLelO+q8=)
3: 3489528EC84511ED90A61540C4F9AE02.roa (hash: IAHu/i87YCurf7TsutZ4NJzzxkW8+ff7z519ukOdfYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4931 (0x1343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Validity
Not Before: Jun 22 16:58:37 2026 GMT
Not After : Jun 29 16:58:37 2026 GMT
Subject: CN=6a3969bd-d7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:39:b8:5c:3a:74:78:fe:85:0c:f7:a6:e6:
ec:77:a6:9e:6b:08:cf:18:4e:28:0b:5b:05:92:c1:
e9:6d:c6:7f:79:23:85:1d:d3:88:41:09:71:08:b9:
17:6c:b5:3f:33:c1:8e:0b:f1:3b:c3:5c:95:9b:d4:
c6:56:69:14:3c:a9:4b:5d:27:50:49:5b:30:3a:5b:
95:14:b8:58:50:8b:07:70:ae:29:80:9e:5e:52:02:
2a:10:a8:f9:d7:1e:27:0f:95:47:8e:23:2c:ae:23:
47:14:02:6c:34:c3:62:14:fe:c5:f8:97:0f:46:4d:
64:1a:cc:cb:c8:74:ec:2a:99:d3:85:5f:a5:d4:d4:
da:bf:88:8c:54:d1:25:e4:2f:3d:37:be:fc:05:59:
45:2d:bd:bf:f8:59:56:3e:ad:2c:fa:51:bf:77:fe:
2f:60:84:b8:2a:9a:37:81:f3:b9:1e:95:fe:d8:60:
46:e6:6e:7b:34:ed:09:d7:32:cf:a3:6d:a9:49:dc:
06:7a:ee:e0:7d:39:31:a0:3b:37:8f:d8:5f:a5:62:
0d:6c:2f:cf:0f:de:45:ae:d7:60:32:fa:ef:bc:2b:
9e:8e:84:f3:0d:65:d0:52:bb:5c:bd:ca:5a:d1:81:
38:dd:b4:65:09:3b:8c:3a:ea:2b:b1:70:cf:76:b3:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2B:1C:1B:3F:8C:5A:98:9F:AA:87:65:49:26:22:B0:FC:20:17:CA
X509v3 Authority Key Identifier:
keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:10:2c:a9:81:27:6c:42:ea:4a:c8:5f:a4:49:88:6a:b8:a2:
4c:3e:fc:14:8c:a4:0f:44:f5:c6:00:9c:c9:e2:e6:30:ff:63:
fb:e9:57:12:c5:83:bf:c1:7c:50:93:23:6c:d6:45:01:8c:c2:
78:8d:05:55:eb:2b:3f:0d:3b:44:43:67:2c:41:a4:c8:c2:13:
10:02:90:46:ab:8b:b1:00:75:e1:8e:a7:e9:fb:70:dc:9e:23:
4a:5f:3d:92:b7:66:74:96:3a:ce:2f:9e:4f:9b:fb:21:41:db:
36:aa:00:2c:1a:3e:3e:da:32:e9:47:01:05:c3:9e:fe:1d:18:
1a:04:56:6d:33:1f:9a:15:64:92:a7:c9:63:5a:b6:11:0c:cb:
61:fa:2c:3c:c6:a4:53:3e:b6:fd:00:95:b7:f9:49:44:11:9c:
c3:11:51:e3:08:5b:1b:fa:20:9e:06:d3:e3:a4:74:49:4e:04:
0c:6d:94:38:77:50:e6:43:dc:58:e2:52:66:f8:e0:c1:d3:59:
33:8e:84:7e:dd:ca:59:d6:5d:18:c2:0b:03:19:a2:e8:f9:a9:
11:01:24:71:6e:65:26:54:c9:52:a1:51:f8:f6:ea:cb:bd:a5:
70:ff:a8:77:66:e4:c8:fc:cc:ef:a7:96:80:cd:ff:e3:46:cb:
32:7d:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:38 2026 by rpki-client